WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
html-forms
Published
2023-12-21
Title
HTML Forms < 1.3.30 - Admin+ Stored XSS
Slug
html-forms
Published
2024-07-01
Title
HTML Forms < 1.3.33 - Admin+ Stored XSS
Slug
html-forms
Published
2024-07-10
Title
HTML Forms – Simple WordPress Forms Plugin < 1.3.34 - Bulk Delete via CSRF
Slug
html-forms
Published
2024-12-18
Title
HTML Forms < 1.4.2 - Reflected Cross-Site Scripting
Slug
html-forms
Published
2025-04-01
Title
HTML Forms < 1.5.2 - Unauthenticated Stored Cross-Site Scripting
Slug
html-forms
Published
2025-04-22
Title
HTML Forms < 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
html-forms
Published
2025-11-07
Title
HTML Forms < 1.5.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
html-forms
Published
2025-12-16
Title
HTML Forms – Simple WordPress Forms Plugin < 1.6.1 - Unauthenticated Stored Cross-Site Scripting
Slug
html-shortcodes
Published
2026-02-10
Title
HTML Shortcodes <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
html-social-share-buttons
Published
2025-09-05
Title
Html Social share buttons < 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
html2wp
Published
2022-06-02
Title
HTML2WP <= 1.0.0 - Unauthenticated Arbitrary File Upload
Slug
html2wp
Published
2022-06-02
Title
HTML2WP <= 1.0.0 - Subscriber+ Arbitrary File Deletion
Slug
html2wp
Published
2022-06-02
Title
HTML2WP <= 1.0.0 - Arbitrary Settings Update via CSRF
Slug
html5-audio-player
Published
2021-09-20
Title
Html5 Audio Player < 2.1.3 - Contributor+ Stored Cross-Site Scripting
Slug
html5-audio-player
Published
2023-01-12
Title
Html5 Audio Player < 2.1.12 - Contributor+ Stored XSS
Slug
html5-audio-player
Published
2024-05-09
Title
HTML5 Audio Player- Best WordPress Audio Player Plugin < 2.2.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Slug
html5-audio-player
Published
2024-06-28
Title
Html5 Audio Player < 2.2.24 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
html5-audio-player
Published
2025-04-16
Title
Html5 Audio Player < 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
html5-audio-player
Published
2025-12-18
Title
HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player 2.4.0 - 2.5.1 - Unauthenticated Server-Side Request Forgery
Slug
html5-chat
Published
2025-01-30
Title
HTML5 chat < 1.08 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
html5-jquery-audio-player
Published
2014-08-01
Title
HTML5 jQuery Audio Player 2.3 - playlist/add_playlist.php Multiple Parameter Stored XSS Weakness
Slug
html5-jquery-audio-player
Published
2014-08-01
Title
HTML5 jQuery Audio Player 2.3 - playlist/add_playlist.php id Parameter SQL Injection
Slug
html5-lyrics-karaoke-player
Published
2024-11-18
Title
HTML5 Lyrics Karaoke Player <= 2.4 - Reflected Cross-Site Scripting
Slug
html5-maps
Published
2019-06-24
Title
HTML5 Maps <= 1.6.5.6 - CSRF & XSS
Slug
html5-maps
Published
2023-10-16
Title
HTML5 Maps < 1.7.1.5 - Arbitrary Settings Update via CSRF